CVE-2022-31883

HIGH 8.8CVE-2022-31883 · Published 28/06/2022 · updated 17/06/2026

In short

CVE-2022-31883 is a HIGH (CVSS 8.8) vulnerability affecting marval msm (marvalglobal).
Chance of exploitation in the next 30 days (EPSS): 1.00%, higher than 62.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
marval msm marvalglobal	`= 14.19.0.12476`	No fix yet

Description

Marval MSM v14.19.0.12476 is has an Insecure Direct Object Reference (IDOR) vulnerability. A low privilege user is able to see other users API Keys including the Admins API Keys.

References

cyber-guy.gitbook.io/cyber-guy/pocs/marval-msm/idor-leads-to-unauthorized-access-to-api-keys · Third Party Advisory
drive.google.com/drive/folders/17Q8ItseCzj5W7wlD6ZFqL0y1N5Emxz4_ · Broken Link
marvalglobal.com · Product

More vulnerabilities in marval msm

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

marval msm

marvalglobal

= 14.19.0.12476

No fix yet

More vulnerabilities in marval msm

See all →